@rebasepro/auth 0.1.2 → 0.2.3

package/dist/index.umd.js

@@ -1,6 +1,6 @@
 (function(global, factory) {
-  typeof exports === "object" && typeof module !== "undefined" ? factory(exports, require("react"), require("react/jsx-runtime"), require("@rebasepro/ui"), require("lucide-react"), require("@rebasepro/core")) : typeof define === "function" && define.amd ? define(["exports", "react", "react/jsx-runtime", "@rebasepro/ui", "lucide-react", "@rebasepro/core"], factory) : (global = typeof globalThis !== "undefined" ? globalThis : global || self, factory(global["Rebase Auth"] = {}, global.react, global.jsxRuntime, global.ui, global.lucideReact, global.core));
-})(this, (function(exports2, react, jsxRuntime, ui, lucideReact, core) {
+  typeof exports === "object" && typeof module !== "undefined" ? factory(exports, require("react")) : typeof define === "function" && define.amd ? define(["exports", "react"], factory) : (global = typeof globalThis !== "undefined" ? globalThis : global || self, factory(global["Rebase Auth"] = {}, global.react));
+})(this, (function(exports2, react) {
   "use strict";
   let baseApiUrl = "";
   function setApiUrl(url) {
@@ -71,12 +71,11 @@
     });
     return handleResponse(response);
   }
-  async function googleLogin(tokenOrPayload, tokenType = "idToken") {
-    const body = typeof tokenOrPayload === "string" ? { [tokenType]: tokenOrPayload } : tokenOrPayload;
+  async function googleLogin(payload) {
     const response = await fetchWithHandling(`${baseApiUrl}/api/auth/google`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(body)
+      body: JSON.stringify(payload)
     });
     return handleResponse(response);
   }
@@ -89,13 +88,11 @@
     return handleResponse(response);
   }
   async function refreshAccessToken(refreshToken) {
-    console.log("[AUTH-API] Calling refresh endpoint...");
     const response = await fetchWithHandling(`${baseApiUrl}/api/auth/refresh`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ refreshToken })
     });
-    console.log("[AUTH-API] Refresh response status:", response.status);
     return handleResponse(response);
   }
   async function logout(refreshToken) {
@@ -197,7 +194,11 @@
     return handleResponse(response);
   }
   let authConfigInflight = null;
+  let authConfigCached = null;
   async function fetchAuthConfig() {
+    if (authConfigCached) {
+      return authConfigCached;
+    }
     if (authConfigInflight) {
       return authConfigInflight;
     }
@@ -209,11 +210,17 @@
       return handleResponse(response);
     })();
     try {
-      return await authConfigInflight;
+      const result = await authConfigInflight;
+      authConfigCached = result;
+      return result;
     } finally {
       authConfigInflight = null;
     }
   }
+  function clearAuthConfigCache() {
+    authConfigCached = null;
+    authConfigInflight = null;
+  }
   const STORAGE_KEY = "rebase_auth";
   const TOKEN_REFRESH_BUFFER_MS = 2 * 60 * 1e3;
   function convertToUser(userInfo) {
@@ -224,18 +231,14 @@
       photoURL: userInfo.photoURL || null,
       providerId: "custom",
       isAnonymous: false,
-      roles: userInfo.roles || []
+      roles: userInfo.roles || [],
+      metadata: userInfo.metadata
     };
   }
   function saveAuthToStorage(tokens, user) {
     try {
-      const data = {
-        tokens,
-        user
-      };
+      const data = { tokens, user };
       localStorage.setItem(STORAGE_KEY, JSON.stringify(data));
-      const expiryDate = new Date(tokens.accessTokenExpiresAt);
-      const expiryStr = Number.isFinite(tokens.accessTokenExpiresAt) ? expiryDate.toISOString() : "invalid";
     } catch (e) {
     }
   }
@@ -282,6 +285,9 @@
         setApiUrl(apiUrl);
       }
     }, [client, apiUrl]);
+    const clearError = react.useCallback(() => {
+      setAuthProviderError(null);
+    }, []);
     const clearSessionAndSignOut = react.useCallback(() => {
       tokensRef.current = null;
       clearAuthFromStorage();
@@ -318,7 +324,6 @@
           if (latestStoredData) {
             saveAuthToStorage(newTokens, latestStoredData.user);
           }
-          const newExpiryStr = Number.isFinite(newTokens.accessTokenExpiresAt) ? new Date(newTokens.accessTokenExpiresAt).toISOString() : "invalid";
           return newTokens;
         } catch (error) {
           if (error instanceof Error && error.code === "NETWORK_ERROR") {
@@ -423,26 +428,20 @@
       }
     }, [client, getAuthToken, refreshAccessToken$1, clearSessionAndSignOut]);
     const handleAuthSuccess = react.useCallback(async (userInfo, tokens) => {
-      console.log("[Auth] handleAuthSuccess called, user:", userInfo.email, "uid:", userInfo.uid);
       tokensRef.current = tokens;
       let convertedUser = convertToUser(userInfo);
       if (defineRolesFor) {
         const customRoles = await defineRolesFor(convertedUser);
         if (customRoles) {
-          convertedUser = {
-            ...convertedUser,
-            roles: customRoles.map((r) => r.id)
-          };
+          convertedUser = { ...convertedUser, roles: customRoles.map((r) => r.id) };
         }
       }
       saveAuthToStorage(tokens, userInfo);
-      console.log("[Auth] Calling setUser, roles:", convertedUser.roles);
       setUser(convertedUser);
       setAuthError(null);
       setAuthProviderError(null);
       setLoginSkipped(false);
       scheduleTokenRefresh(tokens);
-      console.log("[Auth] handleAuthSuccess completed");
     }, [scheduleTokenRefresh, defineRolesFor]);
     const emailPasswordLogin = react.useCallback(async (email, password) => {
       setAuthLoading(true);
@@ -470,11 +469,11 @@
         setAuthLoading(false);
       }
     }, [handleAuthSuccess]);
-    const googleLogin$1 = react.useCallback(async (tokenOrPayload, tokenType) => {
+    const googleLogin$1 = react.useCallback(async (payload) => {
       setAuthLoading(true);
       setAuthProviderError(null);
       try {
-        const response = typeof tokenOrPayload === "string" ? await googleLogin(tokenOrPayload, tokenType ?? "idToken") : await googleLogin(tokenOrPayload);
+        const response = await googleLogin(payload);
         await handleAuthSuccess(response.user, response.tokens);
       } catch (error) {
         setAuthProviderError(error);
@@ -768,6 +767,8 @@
       fetchSessions: fetchSessions$1,
       revokeSession: revokeSession$1,
       revokeAllSessions: revokeAllSessions$1,
+      clearError,
+      setAuthProviderError,
       extra,
       setExtra,
       capabilities: {
@@ -907,6 +908,12 @@
         setLoading(false);
         return;
       }
+      const userRoles = currentUser.roles ?? [];
+      const isUserAdmin = userRoles.some((r) => r === "admin" || r === "schema-admin");
+      if (!isUserAdmin) {
+        setLoading(false);
+        return;
+      }
       if (lastLoadedUidRef.current === currentUser.uid) {
         setLoading(false);
         return;
@@ -1077,7 +1084,7 @@
       saveRole,
       deleteRole,
       isAdmin,
-      allowDefaultRolesCreation: true,
+      allowDefaultRolesCreation: isAdmin,
       includeCollectionConfigPermissions: true,
       defineRolesFor,
       getUser,
@@ -1087,1196 +1094,8 @@
       bootstrapAdmin
     };
   }
-  function RebaseLoginView({
-    logo,
-    authController,
-    noUserComponent,
-    disableSignupScreen = false,
-    disabled = false,
-    notAllowedError,
-    googleEnabled = false,
-    googleClientId
-  }) {
-    const modeState = core.useModeController();
-    const { mode: colorMode, setMode: setColorMode } = modeState;
-    const { t } = core.useTranslation();
-    const [mode, setMode] = react.useState("buttons");
-    const [fadeIn, setFadeIn] = react.useState(false);
-    const [viewVisible, setViewVisible] = react.useState(true);
-    const switchMode = (newMode) => {
-      setViewVisible(false);
-      setTimeout(() => {
-        setMode(newMode);
-        setViewVisible(true);
-      }, 150);
-    };
-    const isBootstrapMode = authController.needsSetup;
-    react.useEffect(() => {
-      const timer = setTimeout(() => setFadeIn(true), 50);
-      return () => clearTimeout(timer);
-    }, []);
-    function buildErrorView() {
-      if (!authController.authProviderError) return null;
-      if (authController.user != null) return null;
-      return /* @__PURE__ */ jsxRuntime.jsx("div", { className: "w-full", children: /* @__PURE__ */ jsxRuntime.jsx(core.ErrorView, { error: authController.authProviderError.message ?? authController.authProviderError }) });
-    }
-    let logoComponent;
-    if (logo) {
-      logoComponent = /* @__PURE__ */ jsxRuntime.jsx(
-        "img",
-        {
-          src: logo,
-          style: {
-            height: "100%",
-            width: "100%",
-            objectFit: "cover"
-          },
-          alt: "Logo"
-        }
-      );
-    } else {
-      logoComponent = /* @__PURE__ */ jsxRuntime.jsx(core.RebaseLogo, {});
-    }
-    let notAllowedMessage;
-    if (notAllowedError) {
-      if (typeof notAllowedError === "string") {
-        notAllowedMessage = notAllowedError;
-      } else if (notAllowedError instanceof Error) {
-        notAllowedMessage = notAllowedError.message;
-      } else {
-        notAllowedMessage = "It looks like you don't have access to the CMS, based on the specified Authenticator configuration";
-      }
-    }
-    const showRegistration = !disableSignupScreen && authController.registrationEnabled;
-    return /* @__PURE__ */ jsxRuntime.jsxs(
-      "div",
-      {
-        className: ui.cls(
-          "relative flex items-center justify-center h-screen w-screen p-4 transition-opacity duration-500 bg-white dark:bg-surface-900",
-          fadeIn ? "opacity-100" : "opacity-0"
-        ),
-        children: [
-          /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "absolute top-4 right-4 flex items-center gap-1 z-10", children: [
-            /* @__PURE__ */ jsxRuntime.jsx(core.LanguageToggle, {}),
-            /* @__PURE__ */ jsxRuntime.jsxs(
-              ui.Menu,
-              {
-                trigger: /* @__PURE__ */ jsxRuntime.jsx(
-                  ui.IconButton,
-                  {
-                    color: "inherit",
-                    "aria-label": "Toggle theme",
-                    children: colorMode === "dark" ? /* @__PURE__ */ jsxRuntime.jsx(lucideReact.MoonIcon, { size: ui.iconSize.small }) : /* @__PURE__ */ jsxRuntime.jsx(lucideReact.SunIcon, { size: ui.iconSize.small })
-                  }
-                ),
-                children: [
-                  /* @__PURE__ */ jsxRuntime.jsxs(ui.MenuItem, { onClick: () => setColorMode("dark"), children: [
-                    /* @__PURE__ */ jsxRuntime.jsx(lucideReact.MoonIcon, { size: ui.iconSize.smallest }),
-                    " ",
-                    t("dark_mode")
-                  ] }),
-                  /* @__PURE__ */ jsxRuntime.jsxs(ui.MenuItem, { onClick: () => setColorMode("light"), children: [
-                    /* @__PURE__ */ jsxRuntime.jsx(lucideReact.SunIcon, { size: ui.iconSize.smallest }),
-                    " ",
-                    t("light_mode")
-                  ] }),
-                  /* @__PURE__ */ jsxRuntime.jsxs(ui.MenuItem, { onClick: () => setColorMode("system"), children: [
-                    /* @__PURE__ */ jsxRuntime.jsx(lucideReact.SunMoonIcon, { size: ui.iconSize.smallest }),
-                    " ",
-                    t("system_mode")
-                  ] })
-                ]
-              }
-            )
-          ] }),
-          /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-col items-center w-[480px] max-w-full p-8 sm:p-10", children: [
-            /* @__PURE__ */ jsxRuntime.jsx("div", { className: "w-32 h-32 m-2 mb-6", children: logoComponent }),
-            notAllowedMessage && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "p-4 w-full", children: /* @__PURE__ */ jsxRuntime.jsx(core.ErrorView, { error: notAllowedMessage }) }),
-            mode !== "forgot" && buildErrorView(),
-            /* @__PURE__ */ jsxRuntime.jsxs("div", { className: ui.cls(
-              "w-full transition-opacity duration-150",
-              viewVisible ? "opacity-100" : "opacity-0"
-            ), children: [
-              isBootstrapMode && !authController.user && /* @__PURE__ */ jsxRuntime.jsx(
-                LoginForm,
-                {
-                  authController,
-                  registrationMode: true,
-                  onClose: () => {
-                  },
-                  onForgotPassword: () => {
-                  },
-                  noUserComponent,
-                  disableSignupScreen: false,
-                  bootstrapMode: true
-                }
-              ),
-              !isBootstrapMode && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
-                mode === "buttons" && /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "w-full flex flex-col gap-3 mt-2", children: [
-                  /* @__PURE__ */ jsxRuntime.jsx(
-                    LoginButton,
-                    {
-                      disabled,
-                      text: "Sign in with email",
-                      icon: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.MailIcon, {}),
-                      onClick: () => switchMode("login")
-                    }
-                  ),
-                  googleEnabled && googleClientId && /* @__PURE__ */ jsxRuntime.jsx(
-                    GoogleLoginButton,
-                    {
-                      disabled,
-                      googleClientId,
-                      authController
-                    }
-                  ),
-                  showRegistration && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "mt-2 text-center", children: /* @__PURE__ */ jsxRuntime.jsxs(ui.Typography, { variant: "body2", color: "secondary", children: [
-                    "Don't have an account?",
-                    " ",
-                    /* @__PURE__ */ jsxRuntime.jsx(
-                      "button",
-                      {
-                        type: "button",
-                        className: ui.cls(
-                          "font-semibold hover:underline cursor-pointer",
-                          "text-primary-600 dark:text-primary-400"
-                        ),
-                        onClick: () => switchMode("register"),
-                        children: "Create one"
-                      }
-                    )
-                  ] }) })
-                ] }),
-                mode === "login" && /* @__PURE__ */ jsxRuntime.jsx(
-                  LoginForm,
-                  {
-                    authController,
-                    registrationMode: false,
-                    onClose: () => switchMode("buttons"),
-                    onForgotPassword: () => switchMode("forgot"),
-                    noUserComponent,
-                    disableSignupScreen,
-                    switchToRegister: showRegistration ? () => switchMode("register") : void 0
-                  }
-                ),
-                mode === "register" && /* @__PURE__ */ jsxRuntime.jsx(
-                  LoginForm,
-                  {
-                    authController,
-                    registrationMode: true,
-                    onClose: () => switchMode("buttons"),
-                    onForgotPassword: () => switchMode("forgot"),
-                    noUserComponent,
-                    disableSignupScreen,
-                    switchToLogin: () => switchMode("login")
-                  }
-                ),
-                mode === "forgot" && /* @__PURE__ */ jsxRuntime.jsx(
-                  ForgotPasswordForm,
-                  {
-                    authController,
-                    onClose: () => switchMode("login")
-                  }
-                )
-              ] })
-            ] })
-          ] })
-        ]
-      }
-    );
-  }
-  function LoginButton({
-    icon,
-    onClick,
-    text,
-    disabled
-  }) {
-    return /* @__PURE__ */ jsxRuntime.jsx(
-      ui.Button,
-      {
-        disabled,
-        className: "w-full",
-        variant: "outlined",
-        size: "large",
-        onClick,
-        children: /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center justify-center w-full gap-3 py-1", children: [
-          /* @__PURE__ */ jsxRuntime.jsx("span", { className: "flex items-center justify-center w-5 h-5", children: icon }),
-          /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "button", children: text })
-        ] })
-      }
-    );
-  }
-  const GoogleIcon = () => /* @__PURE__ */ jsxRuntime.jsxs("svg", { viewBox: "0 0 24 24", width: "20", height: "20", children: [
-    /* @__PURE__ */ jsxRuntime.jsx(
-      "path",
-      {
-        fill: "#4285F4",
-        d: "M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z"
-      }
-    ),
-    /* @__PURE__ */ jsxRuntime.jsx(
-      "path",
-      {
-        fill: "#34A853",
-        d: "M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z"
-      }
-    ),
-    /* @__PURE__ */ jsxRuntime.jsx(
-      "path",
-      {
-        fill: "#FBBC05",
-        d: "M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z"
-      }
-    ),
-    /* @__PURE__ */ jsxRuntime.jsx(
-      "path",
-      {
-        fill: "#EA4335",
-        d: "M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z"
-      }
-    )
-  ] });
-  function GoogleLoginButton({
-    disabled,
-    googleClientId,
-    authController
-  }) {
-    const codeClientRef = react.useRef(null);
-    react.useEffect(() => {
-      const google = window.google;
-      if (!google || codeClientRef.current) return;
-      codeClientRef.current = google.accounts.oauth2.initCodeClient({
-        client_id: googleClientId,
-        scope: "openid email profile",
-        ux_mode: "popup",
-        callback: async (response) => {
-          if (response.error || !response.code) {
-            console.error("Google login error:", response.error);
-            return;
-          }
-          try {
-            await authController.googleLogin({
-              code: response.code,
-              redirectUri: "postmessage"
-            });
-          } catch (err) {
-            console.error("Google login error:", err);
-          }
-        }
-      });
-    }, [googleClientId, authController]);
-    const handleClick = () => {
-      if (!codeClientRef.current) {
-        console.error("Google Sign-In not loaded");
-        return;
-      }
-      codeClientRef.current.requestCode();
-    };
-    return /* @__PURE__ */ jsxRuntime.jsx(
-      LoginButton,
-      {
-        disabled,
-        text: "Sign in with Google",
-        icon: /* @__PURE__ */ jsxRuntime.jsx(GoogleIcon, {}),
-        onClick: handleClick
-      }
-    );
-  }
-  function LoginForm({
-    onClose,
-    onForgotPassword,
-    authController,
-    registrationMode,
-    noUserComponent,
-    disableSignupScreen,
-    bootstrapMode = false,
-    switchToRegister,
-    switchToLogin
-  }) {
-    const passwordRef = react.useRef(null);
-    const [email, setEmail] = react.useState();
-    const [password, setPassword] = react.useState();
-    const [displayName, setDisplayName] = react.useState();
-    react.useEffect(() => {
-      if (!document) return;
-      const escFunction = (event) => {
-        if (event.keyCode === 27) {
-          onClose();
-        }
-      };
-      document.addEventListener("keydown", escFunction, false);
-      return () => {
-        document.removeEventListener("keydown", escFunction, false);
-      };
-    }, [onClose]);
-    function handleEnterPassword() {
-      if (email && password) {
-        authController.emailPasswordLogin(email, password);
-      }
-    }
-    function handleRegistration() {
-      if (email && password) {
-        authController.register(email, password, displayName);
-      }
-    }
-    const handleSubmit = (event) => {
-      event.preventDefault();
-      if (registrationMode)
-        handleRegistration();
-      else
-        handleEnterPassword();
-    };
-    const title = bootstrapMode ? "Welcome!" : registrationMode ? "Create account" : "Sign in";
-    const subtitle = bootstrapMode ? "Create your admin account to get started. This account will have admin privileges." : registrationMode ? "Fill in your details to create a new account" : "Enter your credentials to continue";
-    const buttonLabel = registrationMode ? "Create account" : "Sign in";
-    return /* @__PURE__ */ jsxRuntime.jsxs("form", { onSubmit: handleSubmit, className: "flex flex-col w-full gap-1 mt-2", children: [
-      !bootstrapMode && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "w-full mb-2 -ml-2.5", children: /* @__PURE__ */ jsxRuntime.jsx(ui.IconButton, { onClick: onClose, children: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.ArrowLeftIcon, {}) }) }),
-      /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "h6", className: "mb-0.5", children: title }),
-      /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "body2", color: "secondary", className: "mb-5", children: subtitle }),
-      registrationMode && noUserComponent && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "w-full mb-2", children: noUserComponent }),
-      registrationMode && /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "w-full mb-3", children: [
-        /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "label", color: "secondary", className: "mb-1", children: "Display Name" }),
-        /* @__PURE__ */ jsxRuntime.jsx(
-          ui.TextField,
-          {
-            placeholder: "Jane Doe (optional)",
-            className: "w-full",
-            value: displayName ?? "",
-            disabled: authController.initialLoading,
-            type: "text",
-            size: "medium",
-            onChange: (event) => setDisplayName(event.target.value)
-          }
-        )
-      ] }),
-      /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "w-full mb-3", children: [
-        /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "label", color: "secondary", className: "mb-1", children: "Email" }),
-        /* @__PURE__ */ jsxRuntime.jsx(
-          ui.TextField,
-          {
-            placeholder: "you@example.com",
-            className: "w-full",
-            autoFocus: true,
-            value: email ?? "",
-            disabled: authController.initialLoading,
-            type: "email",
-            size: "medium",
-            onChange: (event) => setEmail(event.target.value)
-          }
-        )
-      ] }),
-      /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "w-full mb-1", children: [
-        /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "label", color: "secondary", className: "mb-1", children: "Password" }),
-        /* @__PURE__ */ jsxRuntime.jsx(
-          ui.TextField,
-          {
-            placeholder: "••••••••",
-            className: "w-full",
-            value: password ?? "",
-            disabled: authController.initialLoading,
-            inputRef: passwordRef,
-            type: "password",
-            size: "medium",
-            onChange: (event) => setPassword(event.target.value)
-          }
-        )
-      ] }),
-      registrationMode && /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "caption", color: "secondary", className: "mb-3", children: "Password must be 8+ characters with uppercase, lowercase, and a number" }),
-      !registrationMode && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "w-full text-right mb-3", children: /* @__PURE__ */ jsxRuntime.jsx(
-        "button",
-        {
-          type: "button",
-          className: ui.cls(
-            "text-xs font-medium hover:underline cursor-pointer",
-            "text-primary-600 dark:text-primary-400"
-          ),
-          onClick: onForgotPassword,
-          children: "Forgot password?"
-        }
-      ) }),
-      /* @__PURE__ */ jsxRuntime.jsx(
-        ui.LoadingButton,
-        {
-          type: "submit",
-          variant: "filled",
-          color: "primary",
-          className: "w-full mt-1",
-          size: "large",
-          loading: authController.authLoading,
-          disabled: authController.authLoading || !email || !password,
-          children: buttonLabel
-        }
-      ),
-      switchToRegister && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "mt-4 text-center", children: /* @__PURE__ */ jsxRuntime.jsxs(ui.Typography, { variant: "body2", color: "secondary", children: [
-        "Don't have an account?",
-        " ",
-        /* @__PURE__ */ jsxRuntime.jsx(
-          "button",
-          {
-            type: "button",
-            className: ui.cls(
-              "font-semibold hover:underline cursor-pointer",
-              "text-primary-600 dark:text-primary-400"
-            ),
-            onClick: switchToRegister,
-            children: "Create one"
-          }
-        )
-      ] }) }),
-      switchToLogin && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "mt-4 text-center", children: /* @__PURE__ */ jsxRuntime.jsxs(ui.Typography, { variant: "body2", color: "secondary", children: [
-        "Already have an account?",
-        " ",
-        /* @__PURE__ */ jsxRuntime.jsx(
-          "button",
-          {
-            type: "button",
-            className: ui.cls(
-              "font-semibold hover:underline cursor-pointer",
-              "text-primary-600 dark:text-primary-400"
-            ),
-            onClick: switchToLogin,
-            children: "Sign in"
-          }
-        )
-      ] }) })
-    ] });
-  }
-  function ForgotPasswordForm({
-    onClose,
-    authController
-  }) {
-    const [email, setEmail] = react.useState("");
-    const [submitted, setSubmitted] = react.useState(false);
-    const [error, setError] = react.useState(null);
-    react.useEffect(() => {
-      if (!document) return;
-      const escFunction = (event) => {
-        if (event.keyCode === 27) {
-          onClose();
-        }
-      };
-      document.addEventListener("keydown", escFunction, false);
-      return () => {
-        document.removeEventListener("keydown", escFunction, false);
-      };
-    }, [onClose]);
-    const handleSubmit = async (event) => {
-      event.preventDefault();
-      setError(null);
-      if (!email) {
-        setError("Please enter your email address");
-        return;
-      }
-      try {
-        await authController.forgotPassword(email);
-        setSubmitted(true);
-      } catch (err) {
-        if (err instanceof Error && err.code === "EMAIL_NOT_CONFIGURED") {
-          setError("Password reset is not available. Please contact your administrator.");
-        } else {
-          setSubmitted(true);
-        }
-      }
-    };
-    if (submitted) {
-      return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-col w-full gap-4 mt-2", children: [
-        /* @__PURE__ */ jsxRuntime.jsx("div", { className: "w-full -ml-2.5", children: /* @__PURE__ */ jsxRuntime.jsx(ui.IconButton, { onClick: onClose, children: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.ArrowLeftIcon, {}) }) }),
-        /* @__PURE__ */ jsxRuntime.jsxs("div", { className: ui.cls(
-          "text-center rounded-xl p-6",
-          "bg-surface-50 dark:bg-surface-950"
-        ), children: [
-          /* @__PURE__ */ jsxRuntime.jsx("div", { className: "text-3xl mb-3", children: "📧" }),
-          /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "subtitle1", className: "mb-2", children: "Check your email" }),
-          /* @__PURE__ */ jsxRuntime.jsxs(ui.Typography, { variant: "body2", color: "secondary", children: [
-            "If an account exists for ",
-            /* @__PURE__ */ jsxRuntime.jsx("strong", { children: email }),
-            ", you'll receive a password reset link shortly."
-          ] })
-        ] }),
-        /* @__PURE__ */ jsxRuntime.jsx(ui.Button, { onClick: onClose, variant: "text", className: "mt-2", children: "Back to sign in" })
-      ] });
-    }
-    return /* @__PURE__ */ jsxRuntime.jsxs("form", { onSubmit: handleSubmit, className: "flex flex-col w-full gap-1 mt-2", children: [
-      /* @__PURE__ */ jsxRuntime.jsx("div", { className: "w-full mb-2 -ml-2.5", children: /* @__PURE__ */ jsxRuntime.jsx(ui.IconButton, { onClick: onClose, children: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.ArrowLeftIcon, {}) }) }),
-      /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "h6", className: "mb-0.5", children: "Reset password" }),
-      /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "body2", color: "secondary", className: "mb-5", children: "Enter your email and we'll send you a reset link." }),
-      error && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "w-full mb-3", children: /* @__PURE__ */ jsxRuntime.jsx(core.ErrorView, { error }) }),
-      /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "w-full mb-3", children: [
-        /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "label", color: "secondary", className: "mb-1", children: "Email" }),
-        /* @__PURE__ */ jsxRuntime.jsx(
-          ui.TextField,
-          {
-            placeholder: "you@example.com",
-            className: "w-full",
-            autoFocus: true,
-            value: email,
-            type: "email",
-            size: "medium",
-            onChange: (event) => setEmail(event.target.value)
-          }
-        )
-      ] }),
-      /* @__PURE__ */ jsxRuntime.jsx(
-        ui.LoadingButton,
-        {
-          type: "submit",
-          variant: "filled",
-          color: "primary",
-          className: "w-full",
-          size: "large",
-          loading: authController.authLoading,
-          disabled: authController.authLoading || !email,
-          children: "Send reset link"
-        }
-      )
-    ] });
-  }
-  function RebaseAuth({ loginView }) {
-    const dispatch = core.useRebaseRegistryDispatch();
-    const registeredRef = react.useRef(false);
-    react.useLayoutEffect(() => {
-      dispatch.registerAuth({ loginView });
-      registeredRef.current = true;
-      return () => {
-        registeredRef.current = false;
-        dispatch.unregisterAuth();
-      };
-    }, [dispatch, loginView]);
-    return null;
-  }
-  function createUserManagementAdminViews({ userManagement, apiUrl, getAuthToken, collections = [] }) {
-    return [
-      {
-        slug: "dev/users",
-        name: "CMS Users",
-        icon: "face",
-        view: /* @__PURE__ */ jsxRuntime.jsx(UsersView, { userManagement, apiUrl, getAuthToken })
-      },
-      {
-        slug: "dev/roles",
-        name: "Roles",
-        icon: "gpp_good",
-        view: /* @__PURE__ */ jsxRuntime.jsx(RolesView, { userManagement, collections })
-      }
-    ];
-  }
-  function RoleChip({ role }) {
-    let colorScheme;
-    if (role.isAdmin) {
-      colorScheme = "blue";
-    } else if (role.id === "editor") {
-      colorScheme = "yellow";
-    } else if (role.id === "viewer") {
-      colorScheme = "gray";
-    } else {
-      colorScheme = ui.getColorSchemeForSeed(role.id);
-    }
-    return /* @__PURE__ */ jsxRuntime.jsx(ui.Chip, { colorScheme, children: role.name }, role.id);
-  }
-  function UsersView({ userManagement, apiUrl, getAuthToken }) {
-    const { users, roles, saveUser, deleteUser, loading } = userManagement;
-    const usersError = "usersError" in userManagement ? userManagement.usersError : void 0;
-    const snackbarController = core.useSnackbarController();
-    const { user: loggedInUser } = core.useAuthController();
-    const [dialogOpen, setDialogOpen] = react.useState(false);
-    const [selectedUser, setSelectedUser] = react.useState();
-    const [deleteConfirmOpen, setDeleteConfirmOpen] = react.useState(false);
-    const [userToDelete, setUserToDelete] = react.useState();
-    const [deleteInProgress, setDeleteInProgress] = react.useState(false);
-    const [formKey, setFormKey] = react.useState(0);
-    const [bootstrapping, setBootstrapping] = react.useState(false);
-    const hasAdmin = users.some((u) => u.roles?.includes("admin"));
-    const handleBootstrap = async () => {
-      setBootstrapping(true);
-      try {
-        const token = await getAuthToken();
-        const response = await fetch(`${apiUrl}/api/admin/bootstrap`, {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "Authorization": `Bearer ${token}`
-          }
-        });
-        const data = await response.json();
-        if (!response.ok) {
-          throw new Error(data.error?.message || "Bootstrap failed");
-        }
-        snackbarController.open({
-          type: "success",
-          message: "You are now an admin! Refreshing..."
-        });
-        window.location.reload();
-      } catch (error) {
-        snackbarController.open({
-          type: "error",
-          message: error instanceof Error ? error.message : "Failed to bootstrap admin"
-        });
-      } finally {
-        setBootstrapping(false);
-      }
-    };
-    const handleAddUser = () => {
-      setSelectedUser(void 0);
-      setFormKey((k) => k + 1);
-      setDialogOpen(true);
-    };
-    const handleEditUser = (user) => {
-      setSelectedUser(user);
-      setDialogOpen(true);
-    };
-    const handleClose = () => {
-      setDialogOpen(false);
-      setSelectedUser(void 0);
-    };
-    const handleDelete = async () => {
-      if (!userToDelete) return;
-      setDeleteInProgress(true);
-      try {
-        await deleteUser(userToDelete);
-        snackbarController.open({
-          type: "success",
-          message: "User deleted successfully"
-        });
-        setDeleteConfirmOpen(false);
-        setUserToDelete(void 0);
-      } catch (error) {
-        snackbarController.open({
-          type: "error",
-          message: error instanceof Error ? error.message : "Error deleting user"
-        });
-      } finally {
-        setDeleteInProgress(false);
-      }
-    };
-    if (loading) {
-      return /* @__PURE__ */ jsxRuntime.jsx(ui.CenteredView, { children: /* @__PURE__ */ jsxRuntime.jsx(ui.CircularProgress, {}) });
-    }
-    return /* @__PURE__ */ jsxRuntime.jsxs(ui.Container, { className: "w-full flex flex-col py-4 gap-4", maxWidth: "6xl", children: [
-      !hasAdmin && loggedInUser && /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "bg-yellow-100 dark:bg-yellow-900 border border-yellow-400 dark:border-yellow-700 rounded p-4 flex items-center justify-between", children: [
-        /* @__PURE__ */ jsxRuntime.jsx("div", { children: /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "label", className: "text-yellow-800 dark:text-yellow-200", children: "No admin users exist. You can make yourself an admin." }) }),
-        /* @__PURE__ */ jsxRuntime.jsx(
-          ui.Button,
-          {
-            onClick: handleBootstrap,
-            disabled: bootstrapping,
-            children: bootstrapping ? /* @__PURE__ */ jsxRuntime.jsx(ui.CircularProgress, { size: "small" }) : "Make me admin"
-          }
-        )
-      ] }),
-      /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center mt-12", children: [
-        /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { gutterBottom: true, variant: "h4", className: "grow", component: "h4", children: "Users" }),
-        /* @__PURE__ */ jsxRuntime.jsx(ui.Button, { startIcon: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.PlusIcon, {}), onClick: handleAddUser, children: "Add user" })
-      ] }),
-      /* @__PURE__ */ jsxRuntime.jsx("div", { className: "overflow-auto", children: /* @__PURE__ */ jsxRuntime.jsxs(ui.Table, { className: "w-full", children: [
-        /* @__PURE__ */ jsxRuntime.jsxs(ui.TableHeader, { children: [
-          /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { header: true, className: "truncate w-16" }),
-          /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { header: true, children: "Email" }),
-          /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { header: true, children: "Name" }),
-          /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { header: true, children: "Roles" })
-        ] }),
-        /* @__PURE__ */ jsxRuntime.jsxs(ui.TableBody, { children: [
-          users.map((user) => /* @__PURE__ */ jsxRuntime.jsxs(ui.TableRow, { onClick: () => handleEditUser(user), children: [
-            /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { style: { width: "64px" }, children: /* @__PURE__ */ jsxRuntime.jsx(ui.Tooltip, { asChild: true, title: "Delete this user", children: /* @__PURE__ */ jsxRuntime.jsx(
-              ui.IconButton,
-              {
-                size: "small",
-                onClick: (e) => {
-                  e.stopPropagation();
-                  setUserToDelete(user);
-                  setDeleteConfirmOpen(true);
-                },
-                children: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Trash2Icon, {})
-              }
-            ) }) }),
-            /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { children: user.email }),
-            /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { className: "font-medium", children: user.displayName }),
-            /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { children: /* @__PURE__ */ jsxRuntime.jsx("div", { className: "flex flex-wrap gap-2", children: user.roles?.map((roleId) => {
-              const role = roles.find((r) => r.id === roleId);
-              return role ? /* @__PURE__ */ jsxRuntime.jsx(RoleChip, { role }, roleId) : /* @__PURE__ */ jsxRuntime.jsx("span", { children: roleId }, roleId);
-            }) }) })
-          ] }, user.uid)),
-          users.length === 0 && /* @__PURE__ */ jsxRuntime.jsx(ui.TableRow, { children: /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { colspan: 4, children: /* @__PURE__ */ jsxRuntime.jsxs(ui.CenteredView, { className: "flex flex-col gap-4 my-8 items-center", children: [
-            /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "label", children: usersError ? "You don't have permission to view users" : "There are no users yet" }),
-            usersError && /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "caption", className: "text-surface-500", children: "Contact an administrator if you need access to this section." })
-          ] }) }) })
-        ] })
-      ] }) }),
-      /* @__PURE__ */ jsxRuntime.jsx(
-        UserDetailsForm,
-        {
-          open: dialogOpen,
-          user: selectedUser,
-          roles,
-          saveUser,
-          handleClose
-        },
-        selectedUser?.uid ?? `new-${formKey}`
-      ),
-      /* @__PURE__ */ jsxRuntime.jsx(
-        core.ConfirmationDialog,
-        {
-          open: deleteConfirmOpen,
-          loading: deleteInProgress,
-          onAccept: handleDelete,
-          onCancel: () => {
-            setDeleteConfirmOpen(false);
-            setUserToDelete(void 0);
-          },
-          title: /* @__PURE__ */ jsxRuntime.jsx(jsxRuntime.Fragment, { children: "Delete?" }),
-          body: /* @__PURE__ */ jsxRuntime.jsx(jsxRuntime.Fragment, { children: "Are you sure you want to delete this user?" })
-        }
-      )
-    ] });
-  }
-  function UserDetailsForm({
-    open,
-    user: userProp,
-    roles,
-    saveUser,
-    handleClose
-  }) {
-    const snackbarController = core.useSnackbarController();
-    const isNewUser = !userProp;
-    const [displayName, setDisplayName] = react.useState(userProp?.displayName || "");
-    const [email, setEmail] = react.useState(userProp?.email || "");
-    const [selectedRoleIds, setSelectedRoleIds] = react.useState(
-      userProp?.roles || ["editor"]
-    );
-    const [isSubmitting, setIsSubmitting] = react.useState(false);
-    const [errors, setErrors] = react.useState({});
-    const [submitCount, setSubmitCount] = react.useState(0);
-    const validate = () => {
-      const newErrors = {};
-      if (!displayName) newErrors.displayName = "Required";
-      if (!email) newErrors.email = "Required";
-      else if (!/\S+@\S+\.\S+/.test(email)) newErrors.email = "Invalid email";
-      if (selectedRoleIds.length === 0) newErrors.roles = "At least one role is required";
-      setErrors(newErrors);
-      return Object.keys(newErrors).length === 0;
-    };
-    const handleSubmit = async (e) => {
-      e.preventDefault();
-      setSubmitCount((c) => c + 1);
-      if (!validate()) return;
-      setIsSubmitting(true);
-      try {
-        const userToSave = {
-          uid: userProp?.uid || crypto.randomUUID(),
-          email,
-          displayName: displayName || null,
-          photoURL: userProp?.photoURL || null,
-          providerId: "custom",
-          isAnonymous: false,
-          roles: selectedRoleIds
-        };
-        await saveUser(userToSave);
-        handleClose();
-      } catch (error) {
-        snackbarController.open({
-          type: "error",
-          message: error instanceof Error ? error.message : "Failed to save user"
-        });
-      } finally {
-        setIsSubmitting(false);
-      }
-    };
-    const dirty = isNewUser || displayName !== (userProp?.displayName || "") || email !== (userProp?.email || "") || JSON.stringify(selectedRoleIds.sort()) !== JSON.stringify((userProp?.roles || []).sort());
-    return /* @__PURE__ */ jsxRuntime.jsx(ui.Dialog, { open, onOpenChange: (open2) => !open2 ? handleClose() : void 0, maxWidth: "4xl", children: /* @__PURE__ */ jsxRuntime.jsxs(
-      "form",
-      {
-        onSubmit: handleSubmit,
-        autoComplete: "off",
-        noValidate: true,
-        style: {
-          display: "flex",
-          flexDirection: "column",
-          position: "relative",
-          height: "100%"
-        },
-        children: [
-          /* @__PURE__ */ jsxRuntime.jsx(ui.DialogTitle, { variant: "h4", gutterBottom: false, children: "User" }),
-          /* @__PURE__ */ jsxRuntime.jsx(ui.DialogContent, { className: "h-full grow", children: /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "grid grid-cols-12 gap-4", children: [
-            /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "col-span-12", children: [
-              /* @__PURE__ */ jsxRuntime.jsx(
-                ui.TextField,
-                {
-                  name: "displayName",
-                  required: true,
-                  error: submitCount > 0 && Boolean(errors.displayName),
-                  value: displayName,
-                  onChange: (e) => setDisplayName(e.target.value),
-                  label: "Name"
-                }
-              ),
-              /* @__PURE__ */ jsxRuntime.jsx(FieldCaption, { children: submitCount > 0 && errors.displayName ? errors.displayName : "Name of this user" })
-            ] }),
-            /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "col-span-12", children: [
-              /* @__PURE__ */ jsxRuntime.jsx(
-                ui.TextField,
-                {
-                  required: true,
-                  error: submitCount > 0 && Boolean(errors.email),
-                  name: "email",
-                  value: email,
-                  onChange: (e) => setEmail(e.target.value),
-                  label: "Email",
-                  disabled: !isNewUser
-                }
-              ),
-              /* @__PURE__ */ jsxRuntime.jsx(FieldCaption, { children: submitCount > 0 && errors.email ? errors.email : "Email of this user" })
-            ] }),
-            /* @__PURE__ */ jsxRuntime.jsx("div", { className: "col-span-12", children: /* @__PURE__ */ jsxRuntime.jsx(
-              ui.MultiSelect,
-              {
-                className: "w-full",
-                label: "Roles",
-                value: selectedRoleIds,
-                onValueChange: (value) => setSelectedRoleIds(value),
-                children: roles.map((role) => /* @__PURE__ */ jsxRuntime.jsx(ui.MultiSelectItem, { value: role.id, children: /* @__PURE__ */ jsxRuntime.jsx(RoleChip, { role }) }, role.id))
-              }
-            ) })
-          ] }) }),
-          /* @__PURE__ */ jsxRuntime.jsxs(ui.DialogActions, { children: [
-            /* @__PURE__ */ jsxRuntime.jsx(ui.Button, { variant: "text", onClick: handleClose, children: "Cancel" }),
-            /* @__PURE__ */ jsxRuntime.jsx(
-              ui.LoadingButton,
-              {
-                variant: "filled",
-                type: "submit",
-                disabled: !dirty,
-                loading: isSubmitting,
-                children: isNewUser ? "Create user" : "Update"
-              }
-            )
-          ] })
-        ]
-      }
-    ) });
-  }
-  function RolesView({ userManagement, collections = [] }) {
-    const { roles, saveRole, deleteRole, loading, allowDefaultRolesCreation } = userManagement;
-    const rolesError = "rolesError" in userManagement ? userManagement.rolesError : void 0;
-    const snackbarController = core.useSnackbarController();
-    const [dialogOpen, setDialogOpen] = react.useState(false);
-    const [selectedRole, setSelectedRole] = react.useState();
-    const [deleteConfirmOpen, setDeleteConfirmOpen] = react.useState(false);
-    const [roleToDelete, setRoleToDelete] = react.useState();
-    const [deleteInProgress, setDeleteInProgress] = react.useState(false);
-    const handleAddRole = () => {
-      setSelectedRole(void 0);
-      setDialogOpen(true);
-    };
-    const handleEditRole = (role) => {
-      setSelectedRole(role);
-      setDialogOpen(true);
-    };
-    const handleClose = () => {
-      setDialogOpen(false);
-      setSelectedRole(void 0);
-    };
-    const handleDelete = async () => {
-      if (!roleToDelete) return;
-      setDeleteInProgress(true);
-      try {
-        await deleteRole(roleToDelete);
-        snackbarController.open({
-          type: "success",
-          message: "Role deleted successfully"
-        });
-        setDeleteConfirmOpen(false);
-        setRoleToDelete(void 0);
-      } catch (error) {
-        snackbarController.open({
-          type: "error",
-          message: error instanceof Error ? error.message : "Error deleting role"
-        });
-      } finally {
-        setDeleteInProgress(false);
-      }
-    };
-    const createDefaultRoles = () => {
-      const defaultRoles = [
-        {
-          id: "admin",
-          name: "Admin",
-          isAdmin: true
-        },
-        {
-          id: "editor",
-          name: "Editor",
-          isAdmin: false
-        },
-        {
-          id: "viewer",
-          name: "Viewer",
-          isAdmin: false
-        }
-      ];
-      defaultRoles.forEach((role) => saveRole(role));
-    };
-    if (loading) {
-      return /* @__PURE__ */ jsxRuntime.jsx(ui.CenteredView, { children: /* @__PURE__ */ jsxRuntime.jsx(ui.CircularProgress, {}) });
-    }
-    return /* @__PURE__ */ jsxRuntime.jsxs(ui.Container, { className: "w-full flex flex-col py-4 gap-4", maxWidth: "6xl", children: [
-      /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center mt-12", children: [
-        /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { gutterBottom: true, variant: "h4", className: "grow", component: "h4", children: "Roles" }),
-        /* @__PURE__ */ jsxRuntime.jsx(ui.Button, { startIcon: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.PlusIcon, {}), onClick: handleAddRole, children: "Add role" })
-      ] }),
-      /* @__PURE__ */ jsxRuntime.jsx("div", { className: "w-full overflow-auto", children: /* @__PURE__ */ jsxRuntime.jsxs(ui.Table, { className: "w-full", children: [
-        /* @__PURE__ */ jsxRuntime.jsxs(ui.TableHeader, { children: [
-          /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { header: true, className: "w-16" }),
-          /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { header: true, children: "Role" }),
-          /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { header: true, className: "items-center", children: "Is Admin" })
-        ] }),
-        /* @__PURE__ */ jsxRuntime.jsxs(ui.TableBody, { children: [
-          roles.map((role) => {
-            return /* @__PURE__ */ jsxRuntime.jsxs(ui.TableRow, { onClick: () => handleEditRole(role), children: [
-              /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { style: { width: "64px" }, children: !role.isAdmin && /* @__PURE__ */ jsxRuntime.jsx(ui.Tooltip, { asChild: true, title: "Delete this role", children: /* @__PURE__ */ jsxRuntime.jsx(
-                ui.IconButton,
-                {
-                  size: "small",
-                  onClick: (e) => {
-                    e.stopPropagation();
-                    setRoleToDelete(role);
-                    setDeleteConfirmOpen(true);
-                  },
-                  children: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Trash2Icon, {})
-                }
-              ) }) }),
-              /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { children: /* @__PURE__ */ jsxRuntime.jsx(RoleChip, { role }) }),
-              /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { className: "items-center", children: /* @__PURE__ */ jsxRuntime.jsx(ui.Checkbox, { checked: role.isAdmin ?? false }) })
-            ] }, role.id);
-          }),
-          roles.length === 0 && /* @__PURE__ */ jsxRuntime.jsx(ui.TableRow, { children: /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { colspan: 4, children: /* @__PURE__ */ jsxRuntime.jsxs(ui.CenteredView, { className: "flex flex-col gap-4 my-8 items-center", children: [
-            /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "label", children: rolesError ? "You don't have permission to view roles" : "You don't have any roles yet." }),
-            rolesError && /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "caption", className: "text-surface-500", children: "Contact an administrator if you need access to this section." }),
-            !rolesError && allowDefaultRolesCreation && /* @__PURE__ */ jsxRuntime.jsx(ui.Button, { onClick: createDefaultRoles, children: "Create default roles" })
-          ] }) }) })
-        ] })
-      ] }) }),
-      /* @__PURE__ */ jsxRuntime.jsx(
-        RoleDetailsForm,
-        {
-          open: dialogOpen,
-          role: selectedRole,
-          saveRole,
-          handleClose,
-          collections
-        },
-        selectedRole?.id ?? "new"
-      ),
-      /* @__PURE__ */ jsxRuntime.jsx(
-        core.ConfirmationDialog,
-        {
-          open: deleteConfirmOpen,
-          loading: deleteInProgress,
-          onAccept: handleDelete,
-          onCancel: () => {
-            setDeleteConfirmOpen(false);
-            setRoleToDelete(void 0);
-          },
-          title: /* @__PURE__ */ jsxRuntime.jsx(jsxRuntime.Fragment, { children: "Delete?" }),
-          body: /* @__PURE__ */ jsxRuntime.jsx(jsxRuntime.Fragment, { children: "Are you sure you want to delete this role?" })
-        }
-      )
-    ] });
-  }
-  function RoleDetailsForm({
-    open,
-    role: roleProp,
-    saveRole,
-    handleClose,
-    collections = []
-  }) {
-    const snackbarController = core.useSnackbarController();
-    const isNewRole = !roleProp;
-    const [roleId, setRoleId] = react.useState(roleProp?.id || "");
-    const [roleName, setRoleName] = react.useState(roleProp?.name || "");
-    const [isAdmin, setIsAdmin] = react.useState(roleProp?.isAdmin ?? false);
-    const [isSubmitting, setIsSubmitting] = react.useState(false);
-    const [errors, setErrors] = react.useState({});
-    const [submitCount, setSubmitCount] = react.useState(0);
-    const validate = () => {
-      const newErrors = {};
-      if (!roleId) newErrors.id = "Required";
-      if (!roleName) newErrors.name = "Required";
-      setErrors(newErrors);
-      return Object.keys(newErrors).length === 0;
-    };
-    const handleSubmit = async (e) => {
-      e.preventDefault();
-      setSubmitCount((c) => c + 1);
-      if (!validate()) return;
-      setIsSubmitting(true);
-      try {
-        await saveRole({
-          id: roleId,
-          name: roleName,
-          isAdmin
-        });
-        handleClose();
-      } catch (error) {
-        snackbarController.open({
-          type: "error",
-          message: error instanceof Error ? error.message : "Failed to save role"
-        });
-      } finally {
-        setIsSubmitting(false);
-      }
-    };
-    return /* @__PURE__ */ jsxRuntime.jsx(ui.Dialog, { open, onOpenChange: (open2) => !open2 ? handleClose() : void 0, maxWidth: "6xl", children: /* @__PURE__ */ jsxRuntime.jsxs(
-      "form",
-      {
-        onSubmit: handleSubmit,
-        autoComplete: "off",
-        noValidate: true,
-        style: {
-          display: "flex",
-          flexDirection: "column",
-          position: "relative",
-          height: "100%"
-        },
-        children: [
-          /* @__PURE__ */ jsxRuntime.jsx(ui.DialogTitle, { variant: "h4", gutterBottom: false, children: "Role" }),
-          /* @__PURE__ */ jsxRuntime.jsx(ui.DialogContent, { className: "h-full grow overflow-y-auto", children: /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "grid grid-cols-12 gap-4", children: [
-            /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "col-span-12 sm:col-span-4", children: [
-              /* @__PURE__ */ jsxRuntime.jsx(
-                ui.TextField,
-                {
-                  name: "id",
-                  required: true,
-                  error: submitCount > 0 && Boolean(errors.id),
-                  value: roleId,
-                  onChange: (e) => setRoleId(e.target.value),
-                  label: "Role ID",
-                  disabled: !isNewRole
-                }
-              ),
-              /* @__PURE__ */ jsxRuntime.jsx(FieldCaption, { children: submitCount > 0 && errors.id ? errors.id : "Unique identifier for this role" })
-            ] }),
-            /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "col-span-12 sm:col-span-4", children: [
-              /* @__PURE__ */ jsxRuntime.jsx(
-                ui.TextField,
-                {
-                  name: "name",
-                  required: true,
-                  error: submitCount > 0 && Boolean(errors.name),
-                  value: roleName,
-                  onChange: (e) => setRoleName(e.target.value),
-                  label: "Role Name"
-                }
-              ),
-              /* @__PURE__ */ jsxRuntime.jsx(FieldCaption, { children: submitCount > 0 && errors.name ? errors.name : "Display name for this role" })
-            ] }),
-            /* @__PURE__ */ jsxRuntime.jsx("div", { className: "col-span-12 sm:col-span-4 flex items-start pt-2", children: /* @__PURE__ */ jsxRuntime.jsxs("label", { className: "flex items-center gap-2 cursor-pointer mt-3", children: [
-              /* @__PURE__ */ jsxRuntime.jsx(
-                ui.Checkbox,
-                {
-                  checked: isAdmin,
-                  onCheckedChange: (checked) => setIsAdmin(Boolean(checked))
-                }
-              ),
-              /* @__PURE__ */ jsxRuntime.jsx("span", { className: "font-medium", children: "Is Admin" })
-            ] }) }),
-            /* @__PURE__ */ jsxRuntime.jsx("div", { className: "col-span-12", children: /* @__PURE__ */ jsxRuntime.jsx(CollectionPermissionsMatrix, { roleId, isAdmin, collections }) })
-          ] }) }),
-          /* @__PURE__ */ jsxRuntime.jsxs(ui.DialogActions, { children: [
-            /* @__PURE__ */ jsxRuntime.jsx(ui.Button, { variant: "text", onClick: handleClose, children: "Cancel" }),
-            /* @__PURE__ */ jsxRuntime.jsx(
-              ui.LoadingButton,
-              {
-                variant: "filled",
-                type: "submit",
-                loading: isSubmitting,
-                children: isNewRole ? "Create role" : "Update"
-              }
-            )
-          ] })
-        ]
-      }
-    ) });
-  }
-  const CRUD_OPS = [
-    {
-      op: "select",
-      label: "Read"
-    },
-    {
-      op: "insert",
-      label: "Create"
-    },
-    {
-      op: "update",
-      label: "Edit"
-    },
-    {
-      op: "delete",
-      label: "Delete"
-    }
-  ];
-  function hasRoleAccess(rules, roleId, op) {
-    if (!rules || rules.length === 0) return true;
-    const applicable = rules.filter(
-      (r) => r.operation === op || r.operation === "all" || r.operations?.includes(op) || r.operations?.includes("all")
-    );
-    if (applicable.length === 0) return false;
-    const forRole = applicable.filter(
-      (r) => !r.roles || r.roles.length === 0 || r.roles.includes(roleId) || r.roles.includes("public")
-    );
-    if (forRole.length === 0) return false;
-    for (const r of forRole) {
-      if ((r.mode ?? "permissive") === "restrictive") return false;
-    }
-    return forRole.some((r) => (r.mode ?? "permissive") === "permissive");
-  }
-  function PermCell({ granted }) {
-    return /* @__PURE__ */ jsxRuntime.jsx(
-      "span",
-      {
-        className: granted ? "text-green-500 dark:text-green-400 text-base select-none" : "text-surface-300 dark:text-surface-600 text-base select-none",
-        children: granted ? "✓" : "✗"
-      }
-    );
-  }
-  function CollectionPermissionsMatrix({ roleId, isAdmin, collections }) {
-    if (!collections || collections.length === 0) {
-      return /* @__PURE__ */ jsxRuntime.jsx("div", { className: "mt-4", children: /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "label", className: "text-surface-400", children: "No collections configured" }) });
-    }
-    const topLevel = collections;
-    return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "mt-6", children: [
-      /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "label", className: "mb-2 block text-surface-600 dark:text-surface-400 uppercase tracking-wide text-xs", children: "Collection permissions" }),
-      /* @__PURE__ */ jsxRuntime.jsx("div", { className: "rounded-lg border border-surface-200 dark:border-surface-700 overflow-hidden", children: /* @__PURE__ */ jsxRuntime.jsxs(ui.Table, { children: [
-        /* @__PURE__ */ jsxRuntime.jsx(ui.TableHeader, { children: /* @__PURE__ */ jsxRuntime.jsxs(ui.TableRow, { children: [
-          /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { header: true, children: "Collection" }),
-          CRUD_OPS.map(({ op, label }) => /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { header: true, className: "text-center w-24", children: label }, op))
-        ] }) }),
-        /* @__PURE__ */ jsxRuntime.jsx(ui.TableBody, { children: topLevel.map((collection) => {
-          const extCol = collection;
-          const noRules = !extCol.securityRules || extCol.securityRules.length === 0;
-          return /* @__PURE__ */ jsxRuntime.jsxs(ui.TableRow, { children: [
-            /* @__PURE__ */ jsxRuntime.jsxs(ui.TableCell, { children: [
-              /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center gap-2", children: [
-                /* @__PURE__ */ jsxRuntime.jsx("span", { className: "font-medium", children: collection.name }),
-                noRules && !isAdmin && /* @__PURE__ */ jsxRuntime.jsx(ui.Tooltip, { title: "No security rules — unrestricted", children: /* @__PURE__ */ jsxRuntime.jsx(ui.Chip, { className: "text-xs", colorScheme: "yellow", children: "No rules" }) })
-              ] }),
-              /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-xs text-surface-400 font-mono", children: collection.slug })
-            ] }),
-            CRUD_OPS.map(({ op }) => /* @__PURE__ */ jsxRuntime.jsx(ui.TableCell, { className: "text-center", children: /* @__PURE__ */ jsxRuntime.jsx(PermCell, { granted: isAdmin || hasRoleAccess(extCol.securityRules, roleId, op) }) }, op))
-          ] }, collection.slug);
-        }) })
-      ] }) }),
-      !roleId && /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "caption", className: "mt-2 text-surface-400 italic", children: "Enter a role ID above to preview permissions" })
-    ] });
-  }
-  function FieldCaption({ children }) {
-    return /* @__PURE__ */ jsxRuntime.jsx(ui.Typography, { variant: "caption", className: "text-surface-500 mt-1.5 ml-1 block", children });
-  }
   exports2.AuthApiError = AuthApiError;
-  exports2.RebaseAuth = RebaseAuth;
-  exports2.RebaseLoginView = RebaseLoginView;
-  exports2.RolesView = RolesView;
-  exports2.UsersView = UsersView;
-  exports2.createUserManagementAdminViews = createUserManagementAdminViews;
+  exports2.clearAuthConfigCache = clearAuthConfigCache;
   exports2.fetchAuthConfig = fetchAuthConfig;
   exports2.getApiUrl = getApiUrl;
   exports2.setApiUrl = setApiUrl;